Composed attribute values should only be generated for the server that processes the request from the client. When that operation is replicated to other servers, the composed attribute changes should be included as part of that operation.

Replicated changes involving composed attributes should not be restricted in a way that prevents external clients from writing to those values. This includes composed values for operational attribute types with the NO-USER-MODIFICATION constraint as well as for cases in which the plugin forbids clients from modifying values.


The plugin rejects any modifyDN operation that alters source attributes in a way that results in composed attribute changes.